Support » Plugin: Sucuri Security - Auditing, Malware Scanner and Security Hardening » Sucuri DNS issue causing time-outs (+ high memory usage)

  • Dear Sucuri,

    (This message was also sent to support@sucuri.net but I have not received any reply)

    The DNS records for ‘wordpress.sucuri.net’ seem to be inconsistent, causing serious memory issues with the Sucuri Scanner plugin for WordPress.

    Issue:
    Multiple nameservers seem to still point to an old IP address (173.230.138.242) for subdomain ‘wordpress.sucuri.net’. This IP address actually seems to reverse DNS to ‘ilz.ghisha.live’, and does not respond to port 443.

    Effect:
    The Sucuri Scanner plugin for WordPress has time-outs trying to connect to 173.230.138.242 on port 443, but keeps retrying, causing continually increasing memory usage until the process is killed or stops trying.

    This is repeated for every WordPress website using the daily automated scan of the Sucuri plugin.

    Diagnosis:
    1) Some sources seem to point to 192.124.249.16 (looks like the new IP, responds to port 443):

    $ host wordpress.sucuri.net
    wordpress.sucuri.net has address 192.124.249.16

    See also https://dnsquery.org/dnsquery/wordpress.sucuri.net/ANY

    2) However, the Sucuri nameservers are still reporting the old IP:

    $ dig @10.SUCURIDNS.COM wordpress.sucuri.net
    ;; ANSWER SECTION:
    wordpress.sucuri.net. 7200 IN A 173.230.138.242

    3) Both Cloudflare and Google are also reporting the old IP address:

    $ dig A @1.1.1.1 wordpress.sucuri.net
    ;; ANSWER SECTION:
    wordpress.sucuri.net. 5415 IN A 173.230.138.242
    
    $ dig A @8.8.8.8 wordpress.sucuri.net
    ;; ANSWER SECTION:
    wordpress.sucuri.net. 5436 IN A 173.230.138.242

    Resolution:
    Is this a known problem?
    And I am correct in assuming that this issue needs to be fixed on the Sucuri nameservers?

    Thank you.

    Best regards

    • This topic was modified 2 months, 3 weeks ago by mezzomedia.
    • This topic was modified 2 months, 3 weeks ago by mezzomedia.
  • You must be logged in to reply to this topic.